November 2024
On 30 September 2024, the Ministry of Digital Development,
Innovations and Aerospace Industry of the Republic of Kazakhstan
(the “RoK”) approved the Rules for Organization of Data Processing Center Operations and Conduct of International or National Technical Audits (the “Rules”) by Order No. 613/NK.
The Rules were developed in accordance with the Law of the RoK
“On Informatization” and specify the requirements for data center
(the “DC”) operations: location, infrastructure, classification by the reliability level, and national or international technical audits.
The Rules come into force on 8 January 2025.
Data Center Operations
DC is intended for:
1) Ensuring fault-tolerant and uninterrupted operation of computing resources and telecommunications equipment
2) Data storage and processing.
The DC is a separate building and/or structure, or a specially equipped space within a building that meets the following requirements:
DC is intended for:
1) Ensuring fault-tolerant and uninterrupted operation of computing resources and telecommunications equipment
2) Data storage and processing.
The DC is a separate building and/or structure, or a specially equipped space within a building that meets the following requirements:
- Natural and Man-Made Emergencies Protection
- Protection against natural disasters (earthquakes, floods, etc.)
- Fire safety system
- Optimal Operating Conditions for Equipment
- Proper waterproofing and ventilation
- Precision systems for maintaining optimal temperature and humidity
- Backup cooling systems to prevent equipment overheating in case of the main system’s failure
- Security and Monitoring
- Access control and video surveillance system to ensure physical security
- Real-time monitoring systems for the DC’s critical systems
The DC must also comply with the Unified Requirements for Information and Communication Technologies and Information Security approved by Resolution No. 832 of the Government of
the RoK on 20 December 2016.
Technical Audit
A DC may voluntarily undergo a national / international technical
audit on a contractual basis:
During the technical audit, the DC’s compliance with the reliability-based classification system outlined below is assessed, resulting in an owner or operator of the DC receiving a certification to one of four tiers.
An owner or operator of the DC publishes information on their website regarding whether the DC has passed or failed the technical audit.
the RoK on 20 December 2016.
Technical Audit
A DC may voluntarily undergo a national / international technical
audit on a contractual basis:
- national technical audit is conducted by an operational information security center licensed by the National Security Committee of the RoK;
- international technical audit is conducted by an international company.
During the technical audit, the DC’s compliance with the reliability-based classification system outlined below is assessed, resulting in an owner or operator of the DC receiving a certification to one of four tiers.
An owner or operator of the DC publishes information on their website regarding whether the DC has passed or failed the technical audit.
- Tier
- Uptime and downtime
per year - Reliability
Contacts
- Dinara TanashevaPartner, Head of Tax & Law Practice in
Kazakhstan and Central AsiaTel.: +7 (727) 258 5960
Dinara.S.Tanasheva@kz.ey.com - Nargiz SuleimenovaSenior Associate, Tax & Law+7 727 258 5960
Nargiz.Suleimenova@kz.ey.com - Kuanysh NurovSenior Consultant, Tax & Law+7 727 258 5960
Kuanysh.Nurov@kz.ey.com